Security Advisory

CVE-2004-1054

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-12-22 05:00:00

Last updated 2024-08-08 00:39:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.

← Browse all CVEs View on cve.org ↗